mmainguy/cameras
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vrek: correct the lock theory, the web account was deleted

Browse Source 
The later 401s are explained by the account no longer existing, so the
illegal-login-lock hypothesis is withdrawn. The HTTPS refusal observed
while the account worked over HTTP still stands unexplained.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Michael Mainguy 2026-09-19 18:32:29 -05:00
parent c0e987d06e
commit d49be1b933
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
.vrek/log.ndjson
View File

@ -992,3 +992,8 @@
{"id":"evt-7e1estxqp6zv","type":"edge.added","subject":"fnd-0b0q7xw","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-0b0q7xw","to":"gol-6q1q5mr"},"at":"2026-09-19T23:30:53.723Z","parents":["evt-bwt21kmnwevq"],"hash":"d677fee3803b51c9db624bf64fd12b6aaf02652d29c8b7d195c67ae731dbab12"}
{"id":"evt-mpvp081sd401","type":"node.updated","subject":"iss-aret59y","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"patch":{"attrs":{"revisit":"2026-09-20","deferred_because":"User asked on 2026-09-19 for a reminder tomorrow: the camera's login lock from today's failed HTTPS attempts needs to expire before testing again, one attempt at a time, starting with the sessionLogin theory."}}},"at":"2026-09-19T23:30:56.101Z","parents":["evt-7e1estxqp6zv"],"hash":"6f8e43c0e73d650e648c2182ade62f998d8371a75bdeb24bbf6d98c29fe0a1e8"}
{"id":"evt-jjb91xaqzfh8","type":"node.status_changed","subject":"iss-aret59y","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"open","to":"deferred"},"at":"2026-09-19T23:30:56.103Z","parents":["evt-mpvp081sd401"],"hash":"91475111219c80eca4cd67e727da928b0925436019ef3349566a492331613ad3"}
{"id":"evt-ss3akqh6yz7p","type":"node.created","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"finding","title":"The web account was deleted, so the later 401s were expected; the HTTPS refusal seen while it existed still stands unexplained","body":"Correction to fnd-0b0q7xw, recorded 2026-09-19. The user deleted the purpose-made web Operator account on camera …af2e, so requests with it now fail with 401 whatever the protocol, and the \"illegal login lock\" hypothesis for those later failures is unsupported. What still stands, because it was observed while the account existed and worked over HTTP: HTTPS on 443 answers with the same digest scheme and realm as port 80, yet the same credentials were refused there, across plain digest, anyauth, basic, Connection: close and TLS 1.2. What is now unknown: whether a lock ever occurred at all. The app was never affected, since it authenticates with each camera's separate ONVIF account, which is also why the dashboard kept working throughout. To resume the TLS investigation (iss-aret59y) a web account has to exist again on a camera; alternatively camera …af54, whose ONVIF account ISAPI does accept, can be used without creating anything new. Also worth noting for hygiene: the deleted account's password had been shared in conversation, so deleting it removed that exposure.","status":"current","owner":"prn-q80g8mz","attrs":{"sources":[{"node":"iss-aret59y","note":"User's statement that they deleted the account, plus one confirming request that returned 401"}],"as_of":"2026-09-19"}},"at":"2026-09-19T23:32:17.241Z","parents":["evt-jjb91xaqzfh8"],"hash":"5dd57916c789d1ecc66af5ba2b9066109ff49f3f46c498a5872ad84c39785bc5"}
{"id":"evt-71gb7p0p0g38","type":"edge.added","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-5etg00n","to":"iss-aret59y"},"at":"2026-09-19T23:32:17.242Z","parents":["evt-ss3akqh6yz7p"],"hash":"bcf63df26c2780a4be305880583f3bf3813fe1c0a1091dc45aa20a8f02aaae48"}
{"id":"evt-0ghcbqs4gg45","type":"edge.added","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-5etg00n","to":"gol-7ajfexk"},"at":"2026-09-19T23:32:17.243Z","parents":["evt-71gb7p0p0g38"],"hash":"17a09c89781685cdfb9206cbf5728e0fbcb9a82f1f5836a7b9dd6b16117f267e"}
{"id":"evt-6bb4da2h9bp0","type":"edge.added","subject":"fnd-5etg00n","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"supersedes","from":"fnd-5etg00n","to":"fnd-0b0q7xw"},"at":"2026-09-19T23:32:17.244Z","parents":["evt-0ghcbqs4gg45"],"hash":"a317e3cb4ceb1b662a373db747d6eaa8156b589294b75638aafd34ff2b792b8b"}
{"id":"evt-ek78k490qg8w","type":"node.status_changed","subject":"fnd-0b0q7xw","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"current","to":"superseded"},"at":"2026-09-19T23:32:17.245Z","parents":["evt-6bb4da2h9bp0"],"hash":"a5692d573786b1316bf02bf1d6f85f8d2b4c002bceae2f7d418525ebd6406ec9"}